<div>
<div class="content wysiwyg-content">
So I understand that Metasploit is meant for use in remote penetration testing. &nbsp;I was wondering what types of tools or exploits Metasploit has for penetrating/exploiting the machine on which it is running.<br />
<br />
I know it has the 'getprivs' exploit that tries a few things once the metasploit shell has been launched. &nbsp;Is there anything else that is meant for local attacks?
</div>
</div>


So I understand that Metasploit is meant for use in remote penetration testing.  I was wondering what types of tools or exploits Metasploit has for penetrating/exploiting the machine on which it is running.

I know it has the 'getprivs' exploit that tries a few things once the metasploit shell has been launched.  Is there anything else that is meant for local attacks?

Using Metasploit to exploit a local machine

So I understand that Metasploit is meant for use in remote penetration testing.  I was wondering what types of tools or exploits Metasploit has for penetrating/exploiting the machine on which it is running.

I know it has the &#39;getprivs&#39; exploit that tries a few things once the metasploit shell has been launched.  Is there anything else that is meant for local attacks?

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.

Security

A vulnerability is a weakness which allows an attacker to reduce a system's information assurance. Vulnerability is the intersection of three elements: a system susceptibility or flaw, attacker access to the flaw, and attacker capability to exploit the flaw. To exploit a vulnerability, an attacker must have at least one applicable tool or technique that can connect to a system weakness, known as the attack surface. Vulnerability management is the cyclical practice of identifying, classifying, remediating, and mitigating vulnerabilities. Other vulnerabilities include security risks, security defects and constructs in programming languages that are difficult to use properly.

Vulnerabilities

A miscellany is defined as a "collection of various pieces of writing by different authors", but it has come to mean something "Of items gathered or considered together of various types or from different sources" or "a collection or group composed of members or elements of different kinds". The word "miscellaneous" comes from the Latin word "miscere", meaning "to mix." You might have heard the expression "a mixed bag," which applies when you don't quite know what you're going to get. More commonly, a miscellaneous group is made up of an odd group of things that don't fit anywhere else.